Ahead of the public release, example values now use generic placeholders
instead of values carried over from a live environment: the connection
placeholders in the settings form, the sample data behind the mail-template
preview, the hostnames in the EOL fixtures, and the device identifiers in the
Intune re-enrolment fixtures. The README points at GitHub rather than the
internal Git host.
Comments, docstrings, HTML placeholder attributes and fixture strings only.
No logic changed and the assertions pin the same behaviour as before, so
there is nothing here to re-test.
.gitignore additionally covers every .env variant (only literal .env and
.env.local matched before, so a .env.production would have been picked up by
git add .), the SAML and LDAPS key material .env.example tells operators to
generate in the repo root, AI-tooling state, root-level node artifacts,
generated report exports, and the untracked third-party checkout sitting in
the working tree, which git add . would otherwise commit as a broken gitlink.
Also untracks the local editor-assistant config and an empty root
package-lock.json stub that had no package.json beside it.
Adds GET /api/v1/assets/export - a streaming, unpaginated CSV export of
the whole (optionally filtered) asset inventory with every DB column plus
denormalised policy/assignee/groups and open-vulnerability counts.
- Extract the list endpoint's filter logic into _apply_asset_filters so
list + export share one source of truth.
- Use selectinload (yield_per-safe) for policy/assignee/groups to avoid
N+1 lazy loads on large exports.
- Add an "Export CSV" toolbar button that downloads the export, honouring
the current search / source / "show decommissioned" filters.
- Add a regression test for the CSV JSON column formatters.
Also drops the auto-generated AGENTS.md/CLAUDE.md (gitnexus tooling files)
from tracking and gitignores them.
vulncheck